External Processors and Transfers
Version 2.0 · Effective date: 23 July 2026
Version 2.0 — Effective date: 23 July 2026
Service providers used by AiActs (aiacts.ai, operated by Aimperia LLC, Georgia).
| Provider | Status | Purpose | Data | Location |
|---|---|---|---|---|
| Hosting provider TO BE CONFIRMED: hosting provider in Georgia | active | Application hosting, storage, database, static files | Account data, assessment inputs, reports, logs | Georgia |
| Hostinger (SMTP) | active | Registration, password reset, transactional email | Email address, one-time tokens, message metadata | EU |
| DeepSeek API | active | LLM generation of report text | Assessment facts needed for the report. No payment data is sent. | Third country |
| Paddle.com | active | Merchant of Record: checkout, invoicing, tax, refunds | Billing identity, payment data | UK / international |
| Google Tag Manager / Google Analytics | consent-gated | Optional analytics | Cookie and device identifiers, usage events — only after consent | EU / US |
| Application logging | active | Security, diagnostics, audit trail | IP address, user id, endpoint, user agent, security events | With hosting provider, Georgia |
| Support mailbox | active | Support, complaints, privacy requests | Email address, message content, attachments you send | TO BE CONFIRMED: support mailbox hosting location |
| CDN provider | not used | — | — | — |
Notes
Paddle is not our processor. As Merchant of Record it is the seller to you and acts as a separate controller of payment data under its own terms and privacy policy.
Where data is sent outside Georgia, we rely on the transfer safeguards permitted by the Law of Georgia on Personal Data Protection and, where the GDPR applies, on Standard Contractual Clauses.
We keep optional analytics disabled until you consent. This register is updated before a new provider is activated.